Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File:                     hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier:          N3Zxi5xwIi2M3AIw+XtteZmwUxYXFgHJN93BUG2wOWA=
Subject key identifier:   B7:96:F1:06:75:92:94:7F:C1:12:31:A4:3D:82:F7:01:6C:DF:5F:30
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer:       /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number:          0277
Signing time:             Thu 23 Jul 2026 03:06:38 +0000
Manifest this update:     Thu 23 Jul 2026 03:06:38 +0000
Manifest next update:     Thu 30 Jul 2026 03:06:38 +0000
Files and hashes:         1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: FE2Ei2VOBNtts3Y2dbviH1+7FSow8spHWP0ZJn8Kxf0=)
                          2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=)
                          3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
                          rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
        Validity
            Not Before: Jul 23 03:06:38 2026 GMT
            Not After : Jul 30 03:06:38 2026 GMT
        Subject: CN=6a61853e-63b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:bd:8b:75:0c:b4:27:45:3a:1a:f1:7e:52:
                    e2:09:0a:d7:64:11:f1:ce:a3:87:d0:36:21:00:81:
                    d7:72:3d:8c:70:cd:7f:fd:ab:95:2d:b0:94:f7:e5:
                    f7:f0:f0:53:b6:e1:1e:88:8a:42:c8:c3:f1:79:42:
                    02:cd:27:40:35:d4:90:5d:c9:14:d3:8b:d3:05:79:
                    8f:d9:fd:de:65:42:fc:6b:90:fa:1a:c3:9e:2f:12:
                    cb:4f:6b:3f:3a:3b:b8:50:b6:86:94:04:2d:74:a5:
                    ef:bb:14:e3:c5:cc:13:0e:88:8b:04:2f:2b:35:2e:
                    2e:38:5c:6d:37:e2:d3:73:29:a1:9f:b5:41:0f:9e:
                    89:dd:bc:d4:9e:ef:62:dd:57:5f:42:34:4a:d2:c1:
                    9e:df:3d:50:34:58:b9:27:c9:19:29:76:24:d0:f5:
                    c3:d7:05:25:43:3e:33:44:16:33:08:87:e0:48:3c:
                    28:62:95:4c:69:58:76:72:49:82:7b:8d:71:4d:b0:
                    e4:ef:bd:00:65:84:b8:2f:13:a4:ea:d2:d0:6f:27:
                    19:75:6d:4a:7f:1a:f2:f1:6e:6f:ce:4b:b2:c7:8d:
                    ac:d7:bb:d5:26:89:a8:0a:58:81:64:d4:87:6f:09:
                    b5:82:10:7f:08:fe:fd:97:b3:e9:89:cc:36:62:f7:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:96:F1:06:75:92:94:7F:C1:12:31:A4:3D:82:F7:01:6C:DF:5F:30
            X509v3 Authority Key Identifier:
                keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:e5:95:1d:a1:35:d1:4d:59:1c:8b:b2:cb:96:0a:91:e8:
         ae:6e:e8:e4:21:2f:47:c0:05:4a:94:3c:69:8a:5e:92:20:88:
         95:dc:14:48:ca:09:c8:18:1d:d1:ac:bd:a9:73:9c:26:a3:54:
         7e:e7:f4:f0:0e:06:f0:3e:4c:40:fa:50:83:45:b7:39:9e:cd:
         df:eb:f9:e4:fb:b8:88:c6:a0:a2:a1:47:36:f5:37:bb:ca:60:
         9d:9c:17:c0:90:fc:62:16:16:c6:83:e4:c6:6a:b1:af:a6:e2:
         9b:11:1e:8c:73:72:76:c7:e4:b9:b9:e0:fa:e0:a0:86:73:d4:
         17:b3:12:e2:b0:46:5e:f2:71:d2:8f:84:b2:ab:06:d1:6f:de:
         12:59:51:6f:37:da:b4:30:2b:2b:97:67:1c:be:ab:22:96:2a:
         40:c8:88:61:05:86:b9:ae:c2:e0:8a:d5:89:d1:2a:b1:81:8d:
         a7:3b:1d:31:4c:97:7e:6a:c2:ab:db:be:dd:9f:2a:7c:6f:95:
         51:ab:5e:f1:79:c1:de:91:93:00:08:eb:b5:76:e5:d2:60:f2:
         7e:05:01:d7:36:b8:2a:d5:f0:5e:8c:11:79:c9:4e:4a:0b:0f:
         47:67:f7:51:f4:5d:eb:d6:d1:63:4d:10:60:c1:5e:49:29:b9:
         2c:66:b8:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz
NTgyQTIwRUIwHhcNMjYwNzIzMDMwNjM4WhcNMjYwNzMwMDMwNjM4WjAYMRYwFAYD
VQQDEw02YTYxODUzZS02M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqr+9i3UMtCdFOhrxflLiCQrXZBHxzqOH0DYhAIHXcj2McM1//auVLbCU9+X3
8PBTtuEeiIpCyMPxeUICzSdANdSQXckU04vTBXmP2f3eZUL8a5D6GsOeLxLLT2s/
Oju4ULaGlAQtdKXvuxTjxcwTDoiLBC8rNS4uOFxtN+LTcymhn7VBD56J3bzUnu9i
3VdfQjRK0sGe3z1QNFi5J8kZKXYk0PXD1wUlQz4zRBYzCIfgSDwoYpVMaVh2ckmC
e41xTbDk770AZYS4LxOk6tLQbycZdW1Kfxry8W5vzkuyx42s17vVJomoCliBZNSH
bwm1ghB/CP79l7Ppicw2YvcHhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeW8QZ1
kpR/wRIxpD2C9wFs318wMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy
MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI
Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACNjllR2hNdFNWRyLssuWCpHorm7o5CEvR8AFSpQ8aYpekiCIldwUSMoJyBgd
0ay9qXOcJqNUfuf08A4G8D5MQPpQg0W3OZ7N3+v55Pu4iMagoqFHNvU3u8pgnZwX
wJD8YhYWxoPkxmqxr6bimxEejHNydsfkubng+uCghnPUF7MS4rBGXvJx0o+EsqsG
0W/eEllRbzfatDArK5dnHL6rIpYqQMiIYQWGua7C4IrVidEqsYGNpzsdMUyXfmrC
q9u+3Z8qfG+VUate8XnB3pGTAAjrtXbl0mDyfgUB1za4KtXwXowReclOSgsPR2f3
UfRd69bRY00QYMFeSSm5LGa4Ug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:54 2026 by rpki-client